
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31322e302f32332d3332203d3e203536303431.roa
File: 3131302e34322e31322e302f32332d3332203d3e203536303431.roa (raw, json)
Hash identifier: uB3eoG4LdrJAwtht3A/M7sqsPVAbGG9x4aSXJZ2+AhQ=
Subject key identifier: A5:0F:D7:30:20:26:E9:89:43:FE:26:22:C0:DA:0F:7A:BC:0E:02:2D
Certificate issuer: /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial: 1D9812E3B72E287CC9D85B2593F54BDDBD800599
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31322e302f32332d3332203d3e203536303431.roa
Signing time: Tue 21 Apr 2026 16:54:06 +0000
ROA not before: Tue 21 Apr 2026 16:49:06 +0000
ROA not after: Tue 20 Apr 2027 16:54:06 +0000
asID: 56041
IP address blocks: 110.42.12.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 03:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:98:12:e3:b7:2e:28:7c:c9:d8:5b:25:93:f5:4b:dd:bd:80:05:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Validity
Not Before: Apr 21 16:49:06 2026 GMT
Not After : Apr 20 16:54:06 2027 GMT
Subject: CN=A50FD7302026E98943FE2622C0DA0F7ABC0E022D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:0d:43:9c:22:c7:8f:65:6d:80:88:47:4b:
f0:61:cc:a9:15:a0:41:2d:06:d9:23:70:fe:dd:93:
a7:ab:7c:ff:1b:26:e9:d1:4f:5c:5b:84:78:47:82:
1b:d7:c9:95:8d:63:47:59:ff:f0:fe:d8:12:bf:3e:
d6:f4:3e:ff:37:c4:73:68:e4:be:42:fd:05:08:cc:
ac:af:07:2a:79:c7:e8:44:58:12:54:70:23:c0:9a:
aa:e6:73:a0:5d:58:20:2f:13:ce:a4:72:ad:fa:16:
94:dd:07:41:07:e4:cd:37:bc:d1:a0:87:93:ab:ca:
ab:a5:6b:fb:e7:ca:fe:eb:1b:bd:27:67:b2:3d:09:
09:7b:50:c6:56:cd:fe:5a:5a:44:90:e3:da:d5:a4:
93:95:8c:c9:cc:be:5e:79:de:70:01:74:39:66:72:
f4:02:1a:1d:a3:a0:43:63:2e:a1:22:83:cb:30:6e:
07:f6:31:82:6f:74:52:30:32:d3:46:5b:29:43:88:
e6:f6:60:3b:d1:e2:9a:82:68:a6:ed:37:03:74:0a:
26:ce:7d:71:0d:d4:d7:4f:e8:23:4e:d8:53:a8:76:
de:11:a3:c8:14:40:2c:12:83:09:ac:d2:57:47:36:
b9:d0:9c:ba:91:51:25:be:03:f4:e9:65:5e:9d:fd:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0F:D7:30:20:26:E9:89:43:FE:26:22:C0:DA:0F:7A:BC:0E:02:2D
X509v3 Authority Key Identifier:
keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3131302e34322e31322e302f32332d3332203d3e203536303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.42.12.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:70:f4:79:82:62:c4:7d:5f:ff:c8:29:eb:3b:f5:5a:fb:b3:
44:7b:61:67:1c:04:1c:db:a6:e2:1d:03:c0:84:2e:10:79:d1:
35:84:40:8f:5b:1a:be:1c:c2:2e:8b:47:68:b9:3d:5e:34:81:
1f:3e:9e:91:83:7c:e5:89:e7:a5:26:59:9b:35:79:63:2d:b1:
dd:6d:d4:cb:44:28:41:86:92:5b:da:4d:70:88:15:56:d9:e0:
c9:2e:88:30:93:73:08:87:6f:16:4d:7b:b3:dd:4a:20:af:3f:
f5:71:ab:b5:2d:8d:28:ed:4d:f7:66:04:93:79:3c:d9:97:08:
cc:44:69:02:1a:3a:1f:38:3e:65:76:0d:c9:7a:10:12:bd:4d:
56:5b:79:39:d0:75:30:38:e7:61:e7:af:92:ef:c6:4e:e8:af:
ac:2d:fb:09:3d:5b:a4:d4:cd:bb:f9:f6:8a:52:bf:e2:d5:ea:
9b:ac:68:2d:34:ff:d1:41:f2:d1:b8:c0:b3:4c:da:48:91:01:
87:dc:1d:06:33:2b:3b:7b:24:52:8e:0d:e6:42:99:c5:77:04:
23:a6:b9:ab:f2:50:76:fb:57:ff:3e:71:ea:8c:2f:ec:f1:d3:
b7:69:c0:32:77:35:08:0e:80:0d:35:61:8a:57:11:f7:c1:dc:
05:5b:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:39:14 2026 by rpki-client